Botnet Statistics for April 2011

detection period: 2011-04-01 00:00 - 2011-04-30 23:59 UTC
total number of suspected botnet IPs: 61430
number of blocked spams: 2406521
recipient count of blocked spams: 65644324

The top 25 countries (as defined by the 2-character country code), ordered by number of suspected botnet IPs are:

Rank	Country	# of suspected botnet IPs
1	China	15733
2	Taiwan	9383
3	India	5676
4	Russian Federation	4208
5	South Korea	3112
6	Brazil	2219
7	Ukraine	1864
8	Indonesia	1654
9	Viet Nam	1502
10	Pakistan	1089
11	United States	875
12	Colombia	730
13	Belarus	711
14	Argentina	704
15	Poland	651
16	Kazakhstan	528
17	Romania	503
18	Serbia	484
19	Spain	481
20	Peru	417
21	Saudi Arabia	406
22	United Kingdom	356
23	Thailand	336
24	Morocco	318
25	Philippines	312

The top 25 countries (as defined by the 2-character country code), ordered by number of blocked spams are:

Rank	Country	# of blocked spams
1	Taiwan	685699
2	China	647688
3	Brazil	180028
4	Russian Federation	95487
5	United States	90492
6	India	59527
7	France	50181
8	Colombia	47077
9	Thailand	43564
10	Poland	39904
11	Indonesia	35200
12	Ukraine	33967
13	Mexico	27650
14	Iran	23989
15	South Korea	23777
16	Germany	21490
17	Chile	18292
18	Kazakhstan	17331
19	Argentina	15830
20	Italy	15668
21	Czech Republic	14611
22	Guatemala	11379
23	Canada	10302
24	Viet Nam	9720
25	European Union	9294

The top 25 countries (as defined by the 2-character country code), ordered by recipient count of blocked spams are:

Rank	Country	recipient count of blocked spams
1	Taiwan	17791793
2	China	14103212
3	Brazil	5634560
4	Russian Federation	2918773
5	United States	2914786
6	India	1900080
7	France	1656754
8	Colombia	1489853
9	Thailand	1229683
10	Poland	1103619
11	Ukraine	1077719
12	Indonesia	990389
13	Mexico	908419
14	South Korea	814827
15	Iran	790737
16	Germany	726259
17	Chile	574986
18	Italy	537770
19	Argentina	530297
20	Czech Republic	454649
21	Kazakhstan	454343
22	Canada	356052
23	European Union	316372
24	Philippines	312487
25	Guatemala	285924

The top 25 networks (as found in WHOIS), ordered by number of suspected botnet IPs are:

Rank	Network	# of suspected botnet IPs
1	HINET-NET	9059
2	CHINANET-GD	4133
3	UNICOM-HA	2979
4	CTTNET	2577
5	BSNLNET	2529
6	UNICOM-GD	1800
7	KORNET-KR	1777
8	VNPT-VNNIC-VN	1054
9	PTCL	948
10	TELKOMNET	819
11	CRTC	703
12	UKRTELNET	689
13	UNICOM-BJ	602
14	UNICOM-HN	599
15	BY-BELPAK-20091210	576
16	RCOM	511
17	MTNLISP	470
18	BHARTI-IN	447
19	002.558.134/0001-58	417
20	AR-TEAR7-LACNIC	412
21	TATACOMM-IN	388
22	CHINANET-JS	387
23	002.558.157/0001-62	376
24	000.065.376/0002-65	346
25	076.535.764/0326-90	254

The top 25 networks (as found in WHOIS), ordered by number of blocked spams are:

Rank	Network	# of blocked spams
1	HINET-NET	675728
2	CHINANET-ZJ-WZ	163575
3	CHINANET-GD	72168
4	UNICOM-GD	50974
5	CHINANET-ZJ	43058
6	UNICOM-SD	39845
7	CHINANET-JS	34960
8	000.065.376/0002-65	28749
9	003.420.926/0002-05	27951
10	CO-ACSA-LACNIC	25053
11	033.530.486/0001-29	21639
12	FR-OVH-20060920	20845
13	UNICOM-HE	20298
14	GZCOMP-CN	18693
15	OVH	18542
16	004.027.547/0001-31	14951
17	UNICOM-HA	14406
18	Hainan-TELECOM	14173
19	002.558.157/0001-62	12256
20	ZBYSZKO-FIRMA-HANDLOWO-USLUGOWA	12081
21	002.558.134/0001-58	11700
22	CHINANET-GS	11472
23	MX-USCV4-LACNIC	11318
24	GT-TESA-LACNIC	11089
25	BSNLNET	10597

The top 25 networks (as found in WHOIS), ordered by recipient count of blocked spams are:

Rank	Network	recipient count of blocked spams
1	HINET-NET	17506911
2	CHINANET-ZJ-WZ	2514367
3	CHINANET-GD	1143372
4	UNICOM-SD	1138044
5	CHINANET-JS	1096344
6	000.065.376/0002-65	991152
7	CHINANET-ZJ	908310
8	CO-ACSA-LACNIC	873711
9	003.420.926/0002-05	858712
10	FR-OVH-20060920	729626
11	033.530.486/0001-29	668235
12	OVH	642292
13	UNICOM-HE	572150
14	GZCOMP-CN	473097
15	004.027.547/0001-31	469240
16	Hainan-TELECOM	457152
17	UNICOM-HA	425414
18	MX-USCV4-LACNIC	396419
19	002.558.134/0001-58	374347
20	002.558.157/0001-62	351370
21	BSNLNET	331358
22	ZBYSZKO-FIRMA-HANDLOWO-USLUGOWA	327564
23	CHINANET-SH	317169
24	ETHR-NET	299896
25	CHINANET-GS	299876